Re: R77.20.85 performance issue on centrally managed SMB

I do have the information that one customer got rid of high CPU load on locally managed SMB after upgrade to R77.20.85 - so what is true for one user / one model / one production environment must not be true for others 🙂

Re: R77.20.85 performance issue on centrally managed SMB

I recommend that you open SR about the GUI issues you are experiencing. It is the right way to bring CheckPoint attention on it. This case was exceptional and brought directly to R&D's attention because it was totally preventing us from running the build in production environment. What I call "showstopper" case. Even so most software divisions won't allow this at all.

Hereby I want to thank R&D for the quick response and being flexible on investigating and fixing this. It was pleasure working with them.

Re: R77.20.85 performance issue on centrally managed SMB

Thank you everyone, I will test the jumbo fix this weekend first and if issue persist than SR will be initiated. The fact the fix did result positive to a customer on standalone, hoping for the same result. Plus there is already an SR for this w/other customers.

Re: R77.20.85 performance issue on centrally managed SMB

build 751 is still available and downloadable. I agree that the firmware upgrade feature on the firewall adds no value. I believe CP has no way to distinguish firewalls with valid subscription vs. out of subscription and hence it never prompts you that a new build is available. That is my two cents, could be wrong.

Re: R77.20.85 performance issue on centrally managed SMB

New firmware versions are announced in CP UserCenter and in Embedded GAiA WebGUI. CPUSE on GAiA appliances is a very different engine and ecosystem that does not include SMB devices!

To "believe that CP has no way to distinguish firewalls with valid subscription vs. out of subscription and hence it never prompts you that a new build is available" is both very wrong and building maybe on a great lack of experience - i have seen the message that there is a new firmware available on SMS rather very often during the last years 😉

Re: R77.20.85 performance issue on centrally managed SMB

No lack of experience my friend, simply providing facts as it relates to me hence the statement I believe. I've been with CP since 96 and evolved with there echo-system on different platforms.

For the rare times SMB displays new firmware, I still have fingers left to count with. Consistency for this functionality to alert on new firmware needs to be improved. Again there may be a reason for this behaviour vs. design. My devices are still stating build 541 on r77.20.81 is up to date. Appreciate the feedback and glad to see the firmware functionality is working to your desired expectation.

Re: R77.20.85 performance issue on centrally managed SMB

Keren indicated build r77.20.85 build 751 is still going QA cycle and in a few days to be released, unclear if it's going to be a different build or same? Keren Greenblat‌ are you able to clarify?, Appreciate it, as always.

Re: R77.20.85 performance issue on centrally managed SMB

Yes, build 751 is very stable for me and also performance is good. I keep an eye on 'top' from time to time and haven't noticed any zombie processes. But notice that my one is centrally managed while I think yours is not.